Built so you don't have to take our word for it.
A security tool should earn its access. Here's exactly what Prycheck does, and what it can't do.
Everything stays on your device
Scans run locally. The app has no analytics, and findings, history and answers aren't sent anywhere.
Keys are never shown or stored
Prycheck shows where a key is with a masked hint. Undo records blank any secret values.
Scans only read
A scan changes nothing. Prycheck changes something only after you click and confirm.
Signed releases
The Mac app is signed and notarised by Apple, so macOS can check it hasn't been altered.
Lifetime licences stay offline
A Lifetime licence holds a number, plan and dates, with no name or email. The app checks it without calling a server. Subscriptions hold a seat instead, and never send scan results.
A website with no trackers
This site runs no scripts and has no analytics, and public pages set no cookies. Payment happens on Stripe.
What Prycheck can see
- AI apps and command-line agents
- Privacy permissions, with Full Disk Access on Mac
- MCP and agent configs
- AI browser extensions
- Keys in common plain-text files
What it can't see
- What apps actually do while running
- What an app sends over the network
- Other apps' private data
- Malware: it isn't an antivirus
Report a security issue
If you find a security problem in Prycheck or this website, email support@prycheck.com. Our contact details are also in security.txt.